[Bug 1049177] Re: isc-dhcp-server apparmor profile should have include ".d"

Scott Moser smoser at ubuntu.com
Tue Sep 11 19:34:01 UTC 2012

Copying from Eucalyptus, and given my changes in the linked branch here, maas packaging will write a file in /etc/apparmor.d/dhcp.d/maas with content like:
# Maas
/{,var/}run/maas/net/ r,
/{,var/}run/maas/net/** r,
/{,var/}run/maas/net/*.pid lrw,
/{,var/}run/maas/net/*.leases* lrw,
/{,var/}run/maas/net/*.trace lrw,

(or whatever seems reasonable for maas).

You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to isc-dhcp in Ubuntu.

  isc-dhcp-server apparmor profile should have include ".d"

Status in “isc-dhcp” package in Ubuntu:
  In Progress

Bug description:
  /etc/apparmor.d/usr.sbin.dhcpd currently has:
    # Eucalyptus
    /{,var/}run/eucalyptus/net/ r,
    /{,var/}run/eucalyptus/net/** r,
    /{,var/}run/eucalyptus/net/*.pid lrw,
    /{,var/}run/eucalyptus/net/*.leases* lrw,
    /{,var/}run/eucalyptus/net/*.trace lrw,

      #include <local/usr.sbin.dhcpd>

  The MAAS project is looking to use isc-dhcp-server almost exactly like
  eucalyptus did, and as a result would need some changes to this
  profile.  In speaking with jdstrand [1], he suggested that "#include
  <isc-dhcpd.d>" was the preferred way to enable this.

  [1] http://irclogs.ubuntu.com/2012/09/11/%23ubuntu-server.html#t14:36

  ProblemType: Bug
  DistroRelease: Ubuntu 12.10
  Package: isc-dhcp-server 4.2.4-1ubuntu7
  ProcVersionSignature: User Name 3.5.0-13.14-generic 3.5.3
  Uname: Linux 3.5.0-13-generic x86_64
  ApportVersion: 2.5.1-0ubuntu7
  Architecture: amd64
  Date: Tue Sep 11 15:01:45 2012
  Ec2AMI: ami-00000148
  Ec2AMIManifest: FIXME
  Ec2AvailabilityZone: nova
  Ec2InstanceType: m1.small
  Ec2Kernel: unavailable
  Ec2Ramdisk: unavailable
   PATH=(custom, no user)
  SourcePackage: isc-dhcp
  UpgradeStatus: No upgrade log present (probably fresh install)
  mtime.conffile..etc.dhcp.dhcpd.conf: 2012-09-07T14:46:55.587373

To manage notifications about this bug go to:

More information about the foundations-bugs mailing list